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Passivity Degradation In Discrete Control Implementations: An 
Approximate Bisimulation Approach 


Xiangru Xu^, Necmiye Ozay^, Vijay Gupta^ 


Abstract —In this paper, we present some preliminary results 
for compositional analysis of heterogeneous systems contain¬ 
ing both discrete state models and continuous systems using 
consistent notions of dissipativity and passivity. We study 
the following problem: given a physical plant model and 
a continuous feedback controller designed using traditional 
control techniques, how is the closed-loop passivity affected 
when the continuous controller is replaced by a discrete (i.e., 
symbolic) Implementation within this framework? Specifically, 
we give quantitative results on performance degradation when 
the discrete control implementation is approximately bisimilar 
to the continuous controller, and based on them, we provide 
conditions that guarantee the boundedness property of the 
closed-loop system. 

1. Introduction 

Consider a cyber-physical system in which certain ele¬ 
ments (e.g. the plant to be controlled) are physical, while 
other elements (e.g. controllers) are implemented in software. 
How do we systematically analyze and design such hetero¬ 
geneous systems? In spite of the many important steps that 
have been taken to answer this question, more work remains 
to be done. We present an approach that seeks to extend 
the powerful tools of passivity based analysis and design 
to such heterogeneous systems. Specifically, the question 
we consider is - suppose a continuous controller has been 
designed to ensure specified passivity indices for the closed- 
loop system, what guarantees on passivity can be preserved if 
the controller is implemented in software? Our answer quan¬ 
titatively shows how much passivity can be inherited from 
the original design that was done in the continuous domain 
when the symbolic control implementation is approximately 
bisimilar to the continuous controller. 

Passivity, and its generalization dissipativity, are tradi¬ 
tional tools in control theory. They have seen a recent 
resurgence for design of large scale systems since they 
offer the crucial property of compositionality - two passive 
systems in feedback configuration remain passive [2]. This 
property is not satisfied, e.g., by stability. We refer the reader 
to texts such as [2], [3], [4] for a background in passivity. We 
note here that, perhaps inspired by cyber-physical systems, 
many important recent results have considered effects such as 
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quantization [5], delays [6], [7], [8], [9] and packet drops [10] 
induced by communication networks and discretization of 
time [11], [12], [13] on passivity. Each of these effects 
require an extension of the original definition of passivity 
and/or extra assumptions to be imposed on the set-up; 
for instance, [13] requires the gain from the input to the 
derivative of the output to be bounded in a suitable sense. 
Under similar assumptions, we show that it is possible to 
reason about passivity of discrete-state systems and their 
interconnections with continuous plants. Our work is also 
related (yet, complementary) to the line of work on passivity 
of switched and hybrid systems [14], [15], [16], [17], the 
input/output gain notions for finite-state systems [18], and 
analysis of control implementations [19], [20]. 

Recently proposed symbolic models for dynamical sys¬ 
tems provide a unified framework for studying the interac¬ 
tions of software and physical phenomena (see for instance, 
[21], [22], and the references therein). Such symbolic models 
are also used in control software synthesis from high-level 
specifications [23], [24], [25]. The basic workflow in these 
approaches is (i) to compute an approximate symbolic model 
of the plant based on (bi)simulation relations, (ii) to syn¬ 
thesize a discrete controller for the symbolic plant model, 
(iii) to refine the discrete controller and compose it with 
the original plant in feedback. By construction these discrete 
controllers can be implemented in software and guarantee 
that the closed-loop system satisfies the desired high-level 
specifications. However, a controller designed using these 
approaches essentially includes an internal model of the plant 
it is designed for [21]. Therefore, the complexity of the 
controller grows (exponentially) with the dimension of the 
state-space of the plant, which remains a major limitation 
for large scale applicability of these techniques for complex 
systems. 

For specifications like stability or passivity, it is often 
possible to achieve desired performance with classical con¬ 
trollers such as PID, lead-lag compensators, or controllers 
with simple state space representations. If these controllers 
are then implemented as software modules, it is of interest to 
ask what is the resulting effect on such specifications. This 
paper addresses that question. The basic workflow that we 
consider is (i) to synthesize a continuous controller for the 
continuous plant model to satisfy specified passivity indices 
in closed loop, (ii) to compute an approximate symbolic 
model of the controller based on bisimulation relations, and 
(iii) to compose the discrete controller with the original 
plant in feedback. Our results provide a relation between 
passivity indices of original continuous feedback loop, the 



bisimulation parameters, and the passivity indices of the new 
setup with the discrete controller and continuous plant. These 
results can then be used to guide the software implementation 
of the controller so that desired performance (in terms of 
passivity) can be guaranteed in the new setup. We note 
that the controllers we consider are arbitrary (apart from 
constraints such as stability) and are designed in continuous 
space (where the set of available tools is much richer). 

Notation: Z, Z_|_, Zq,M, K’*', denote the set of integer, 
positive integer, non-negative integer, real, positive real and 
non-negative real numbers, respectively. K" denotes the 
space of n-dimensional real vectors. ||a;|| and ||a ;||2 denote 
the £oo and £2 norm of a vector x G M", respectively. For 
continuous (discrete) time signal x : Kq —K" (x : Zq — 
M"), x(t) {x\k]) denotes its value at time t (time step k). 
For any ACM" and p > 0, [A\^ := {a G A\ai = ki^, ki G 
Z, i = 1, 2,..., n}. A relation R C A x B is identified with 
the map R ■. A ^ 2^, which is defined by 6 G i?(a) if and 
only if (a, h) G R. For a set S, the set R{S) is defined as 
R{S) = {b G B ■. 3a G S, (a, h) G i?}. Given a relation 
R C A X B, R~^ denotes the inverse relation of R, i.e., 
i?-i := {( 6 , a) G B X A : {a,b) G R}. 

II. Preliminaries 

A. Control Systems and Transition Systems 

A continuous-time control system is a tuple E = 
(AT, U, Y, /, h) where X C M” is a set of states, U C M™ is 
a set of inputs, Y C M™ is a set of outputs, / : X x (7 —>■ M" 
and h : X X U ^ M™ are both continuous maps. The state, 
input and output of E at time t G M,^ is denoted by x{t), 
u{t), y{t), respectively, and their evolution is governed by; 

xit) = f{x(t),u{t)), 

y(t) = h{x{t),u(t)), VfGMj. 

We assume that / satisfies the standard conditions such 
that, given any sufficiently regular control input signal u : 
[0,T] -G U with T > 0 and any initial condition xq G X, 
there exists a unique state (and output) trajectory x (and y) 
defined on [0,T] satisfying x(0) = xq and Eq. Q- Denote 
by x(r, XoiU) the state reached at time r under the input u 
from the initial state Xq of E. The continuous-time system 
E is called incrementally input-to-state stable (^-ISS) [26] 
if it is forward complete and there exist functions jSi G ICC 
and /?2 G /Coo [2] such that for any t G MjJ", any initial state 
xi,X 2 G M" and any input u,v, the following condition is 
satisfied; 

|lx(/,a;i,u)-x(t,a; 2 ,v)|| < ^i(||a:i-a; 2 ||,/)+/ 52 (||u-v||oo)- 

( 2 ) 

A discrete-time control system is a tuple E^; = 

(X, U, Y, fii, hj) where X C M" is a set of states, U C M™ is 
a set of inputs, Y C M™ is a set of outputs, /^ ; X x 17 —>■ X 
and hd ■ X X U —t M™ are both continuous maps. The state, 
input and output of E^ at time step fc G Zg is denoted by 
x[k], u[k], y[k], respectively, and their evolution is governed 


by; 

x[k + l] = fd{x[k],u[k]), 

y[k] = hdix[k],u[k]), V/c G Zg. 

The state and output trajectories of the system E are discrete¬ 
time signals satisfying Eq. •H). 

Definition 1: A transition system is a quintuple T = 
{Q, L, O, —>■, H), where; 

• Q is a set of states; 

• L is a set of labels; 

• O is a set of outputs; 

• —Q X L X Q is the transition relation; 

• H : Q X L —> O is the output function. 

A transition system T is said to be metric if Q, L, O are 
equipped with metrics dg : Q x Q —> M^J", di : L x L ^ Mj}" 
and do ; O X O —M^J", respectively. Denote an element 
iq,£,p) G —!■ hy q-^p. 

Bisimulation is a binary relation between two transition 
systems, which, roughly speaking, requires the two systems 
match each other’s behavior [21]. Girard et al. generalized 
the conventional bisimulation to e-approximate bisimulation, 
which allows the states of two transition systems to be 
within certain bounds [27]. Furthermore, to capture the input 
and output behaviors of transition systems, we consider the 
following (e, /r)-approximate bisimulation relation adopted 
from [28]. 

Definition 2: Given two metric transition systems Ti = 
and T 2 = {Q 2 ,L, 0 ,-^,H 2 ) where 
the state sets Qi,Q 2 are equipped with the same metric d^ 
and the input set L is equipped with the metric dj, for any 
e, p G M+, a relation R C Qi x Q 2 is said to be an (e,p,)- 
approximate bisimulation relation between Ti and T 2 , if for 
any ( 91 , 92 ) G R: 

(i) ds(9i,92) < e; 

(ii) 9 i —Pi implies the existence of £2 G T such that 
di(£i,£ 2 ) < p, 92 P 2 and (pi,p 2 ) G R, 

(iii) 92 P 2 implies the existence of £1 G T such that 

di(£i,£ 2 ) < ft, 9i Pi and (pi,p 2 ) G R. 

If there exists an (e, /j,)-approximate bisimulation rela¬ 
tion R between Ti and T 2 such that R{Qi) = Q 2 and 
R~^{Q 2 ) = Qi, Ti is called (e, ft)-bisimilar to T 2 , which is 
denoted as Ti T 2 . 

Given a continuous-time control system E = 
{X,U,YJ,h) with X = M”,17 = M"*,!" = M™ 
and a sampling time r, we define a transition 
system associated with the time-discretization of E as 
Tt-(E) = (Xi,?7i,yi,—which consists of; 

. Xi = M”; 

. Ui = M™; 

. Yi = M™; 

• p q if x(r,p, u) = 9 where u ; [ 0 ,r) —)• {rt}, 

u GUi (i.e., u is a constant signal with value u); 

. Hi = h. 


We interpret the trajectories of Tr{T,) in discrete-time, that 
is, it has an equivalent representation in terms of a discrete¬ 
time control system as in ([^. 

By further quantizing the state and input spaces of E, we 
obtain an infinitely countable transition system Tr^rii'^) = 
(X 2 , C/ 2 , 12 , H 2 ) for some r, /r, p > 0 ; 

. X2 = [R%-, 

. C/2 = 

. ^2 = 

• p q if ||x(r,p,u) — g|| < rj/2 where u : [0,t) —> 
{m}, u G C/2; 

• H2{x, u) = y where \\y — h{x, u)|j < ^/2, ij G Y^. 

The trajectories of Tr^n{Y) are also interpreted in discrete¬ 
time. The state, input and output of Tr^rjiY) at time step 
/c G Zq is denoted by a;[fc], u[k], y[k], respectively and their 
(possibly non-deterministic) evolution is governed by: 

x[k + \]&{p&X2\x[k]^^p}, 
y[k] G H2{x[k],u[k]), \/kGZo. 

The following proposition is a direct application of The¬ 
orem 5.1 in [22]. 

Proposition 1: Consider a continuous-time control sys¬ 
tem E and any desired precision e > 0. If E is i5-ISS 
satisfying 0 and parameters r, p, /r > 0 satisfy the following 
inequality 

/?i(e,T)-f/32 (m)+ t?/2 < e, (5) 

then T,(E) rr^^(E). 

We call the transition system T't-^^(E) with Tt(Y) 
Trf_irj{Y) a symbolic model for E. One nice property of this 
symbolic model is that its evolution can be chosen to be 
deterministic [29], which is appropriate for discrete software- 
based implementation. 

B. Dissipativity and Quasi-dissipativity 

Some basic definitions about dissipativity and quasi- 
dissipativity are now given. 

Definition 3: A continuous-time control system E is 
called dissipative with respect to a supply function w{x, u, y) 
if there exists a continuous, positive semi-definite storage 
function V{x) such that the following (integral) dissipation 
inequality 

V{x{t2)) -V{x{ti)) < f w{x{s),u{s),y{s))ds ( 6 ) 

is satisfied for all fi,f 2 G with ti < t2 and all inputs u. 

A system is called input feed-forward output feedback 
passive if it is dissipative with respect to the supply function 
w{u,y) = u^y — py^y — fvfiu for some p G M [30]. 
Particularly, it is called passive if 1 / = p = 0 and very 
strictly passive (VSP) if p > 0,1^ > 0. The numbers 
ly, p are called passivity indices, which reflect the excess or 
shortage of passivity of the system. There are two points 
to emphasize. First, the indices p and v are not required to 
be non-negative in the input feed-forward output feedback 


passivity definition. Second, these indices are not unique for 
a given system; a system typically admits a family of indices. 

Definition 4: A discrete time control system E^ is called 
dissipative with respect to the supply function w{x,u,y) 
if there exists a continuous, positive semi-definite storage 
function V{x) such that the following dissipative inequality 

V{x[k -f 1]) — V{x[k]) < w{x[k],u[k],y[k]) (7) 

is satisfied for any k G Zq and any u. 

Similar to the continuous case, we can define different 
dissipativity notions by choosing various forms of w{x, u, y). 

Unlike dissipative systems defined above, quasi- 
dissipative (or almost-dissipative) systems allow for internal 
energy generation, and are defined as follows [31], [32]. 

Definition 5: The continuous (resp. discrete) time control 
system E (resp. E^;) is called quasi-dissipative with supply 
function w{x,u,y) if there exists a constant a > 0 such E 
(resp. Yd) is dissipative with supply function w{x, u, y)-\-a. 

It is clear that dissipative systems are quasi-dissipative 
with a = 0. If w{x,u,y) = u^y — vu^u — py'^y with 
v,p > 0 , then the system is called (y, p, a)-very strictly 
quasi-passive (VSQP). For example, a discrete-time VSQP 
system E^; satisfies the following dissipative inequality for 
any k G Zg: 

V(x[k -h 1]) - V(x[k]) 

< ulkY'y[k] — vu[k]^u[k] — py'^[k]y[k] -\- a, (8) 

where v,p,a > f) and V(x) is positive semi-definite. 

Definition 6: System 0 is called strongly finite-time 
detectable if there exist Ng G Zg,K G such that for 
any x[k], k G Zg and for any input u[i\, k < i < k -\- Ng, 
k+No 

E \m\i>4m\\i (9) 

i—k 

Intuitively, strong finite-time detectability condition im¬ 
plies that large initial states result in large output signals. 
Next, we establish a connection between quasi-passivity and 
ultimate boundedness of discrete-time systems. This result 
will be later used in analysis of feedback interconnections. 
To the best of our knowledge, this result is new and can be 
of independent interest. A similar result for continuous-time 
systems is given in [32]. 

Theorem 1: Given a strongly finite-time detectable 
discrete-time control system E^ that satisfies with posi¬ 
tive semi-definite, radially unbounded V and v,p,a > 0, if 
the input is bounded at all time and the initial state is also 
bounded, then the state of E^ is ultimately bounded, i.e., if 
sup{i>fe} ||w [*]||2 < Bi, ||a:[A :]||2 < B 2 where k is the initial 
time step and Bi,B 2 > 0, then there exists D > 0 such that 
sup^>fe l|a:[s ]||2 < D. 

Proof: Given in Appendix ■ 

Corollary 1: Given a strongly finite-time detectable 
discrete-time control system E^; that satisfies V{x[k -\- 1]) — 
V{x[k]) < —py'^\k]y\k] -\- a for any k G Zg with positive 
semi-definite, radially unbounded V(x) and p,a > 0 , if 
the input is bounded at all time and the initial state is also 
bounded, then the state of E^ is ultimately bounded. 



C. Problem Setup 

In this subsection, we informally introduce the main 
problem considered in this paper. 

Consider the setup in Figure where a continuous-time 
control system Si, which corresponds to a physical plant, 
is connected in feedback with a discrete implementation 
Tt-^^(E 2 ), which is obtained from a designed continuous¬ 
time controller S 2 and satisfies Tt{Ti 2 ) Tr^,-i{T, 2 ) 

for some e, t, > 0. Given the passivity indices of Ei 
and E 2 , our goal is to find bounds on the passivity indices 
of the closed-loop system Ec. In this setup we assume that 
(i) the external reference inputs Wi,i = 1,2 to the closed- 
loop system E^ are discrete-time signals (e.g., obtained via a 
digital sensor or user interface), and (ii) all the discrete-time 
signals in the feedback loop are synchronized. 


For any e > 0, suppose that parameters r, /r, ry > 0 are 
chosen such that T't-(E) Tt-^^(E). Further, suppose 

that E is input feedforward output feedback passive with 
passivity indices p) and storage function V{x) that satis¬ 
fies |l^(a;i) -V(x 2 )\ < L\\xi - X 2 \\^ for any ||xi - X 2 \\ < e 
and some constants L,9 > 0. Then, 

(i) T't(S) satisfies the following (discrete time) passivity 
inequality for any k G Zq: 

V{x[k + 1]) - V{x[k]) < 

Tu[kfy[k] - Tiy'\\u[k]\\l - Tp\\y[k]\\l 

where 

p'= P-1 t\p\/Xi. 



Fig. 1. The closed-loop system Ec consists of Ei and TT^r]('^ 2 )\ ZOH is 
zero-order hold, sampler is the ideal sampler and quantizer is the uniform 
quantizer. 


The problem is solved in two steps. In Section III 


show that the passivity indices of E 2 induce certain indices 
on Trfj.rj{X^ 2 )- Then, in Section IV we show that the passivity 
properties of the closed-loop system with the controller E 2 
are, in some sense, inherited by the system when E 2 is 
replaced by Tr^^r,{'Z 2 )- 


III. Passivity Degradation of c-Approximate 
Bisimilar System 

In this section, we study the relation of the passivity 
indices of a continuous-time control system E to the pas¬ 
sivity indices of its approximately bisimilar discrete version 
T.r/xr/(S), which can be implemented in software. 

We suppose that the inputs to E are piece-wise constant 
signals in the set Ur ■= {u : Rq —t U\u{t) = u{{k — 
l)T),Vf S [{k — 1)t, fcT),fc S Z+} with T the sampling 
time, and the following assumption from [13] holds: 

Assumption 1: E satisfies the following gain inequality 
for any ti,t 2 G with ^2 > h and any admissible u: 

ril9(^)ll!ds<j^ (10) 

Jti Jti 

where 7 > 0 is a constant. 

The following result shows how passivity indices degrade 
under discretization and quantization. 

Theorem 2: Consider a continuous time control system 
E = (X, 17, y, /, h) that is 5-ISS and satisfies Assumption 


(ii) Tr^rii^) satisfies the following (discrete time) passivity 
inequality for any k G Zq: 

V(x[k + 1]) - V{x[k]) < 

Tu[kfm-ri'"\\m\\i-rp"\\m\\i+c^ 


where 


v” = V - - |p|r7(r7 -f yRnpXs + A4), 

P" = P - IpKai + s/mpX^), 

+ Tp\p\C-i^ + ^^+Pf) + 2Le^. 

( 12 ) 


\/mu 


Here, Ai,A 2 ,...,A 5 are arbitrary positive real numbers. 

Proof: Given in Appendix ■ 

A few remarks are in order. 

Remark 1: The numbers Ai, A 2 ,..., A 5 provide some flex¬ 
ibility in choosing the passivity indices. Note that if Ai = 1, 
then U and p' coincide with the degraded passivity indices 
ed,Sd given in [13], respectively; if p — 0, A 4 = Ai, then 
v" ^p" coincide with v'^p', respectively. This is intuitive 
since a smaller value of p indicates that 1 / 2 , Y 2 are quantized 
with more precision, and U 2 ,Y 2 degenerate to K"* when 
p = 0. However, the presence of a > 0 reflects the further 
passivity degradation under state quantization. 

Remark 2: If x(f,0,0) = 0, ||a;o|| and ||u||oo are both 
bounded, then, by we can see that |jx(f, a;o, u)|j < 
j3i(^\\xo\\,t) + ; 52 (| 1 u||oo)- Therefore, x(f,a;o,u) is bounded 
by some M > 0 for any t > 0, which implies that the state 
x[k] of Tr{'Y) is bounded by M and x[k] of Trp,ri{Z) is 
bounded by M -f e. 

Remark 3: Equations GU and 0 indicate that to ensure 
iz', p' > 0 or i/”, p" > 0, it is necessary that E is VSP with 
V, p > 0. On the other hand, if 12 , p > 0, it is not hard to find 
that to ensure U ,p' > 0 or i/”, p" > 0 , r should satisfy 
2v 

^ ^ 7(V&^^+1) 

Note that to ensure Tr(Y) Trf^rjCS), t should be 

chosen large enough such that inequality Q holds. There¬ 
fore, given precision e, a necessary condition for U,p' > 0 
or v'\ p" > 0 is that there exist p,r] > 0 such that 
l3i{e,Tmax) + I32{p) +v/‘2 < e holds. 













































IV. Passivity Analysis of Closed-loop System 


In this section, we present the main result of the paper. 

Theorem 3: Consider the setup in Figure [T] in which the 
system Si corresponds to the continuous time plant, and 
the system (with Tr{'E 2 ) TV^r,(S 2 ) for 

some e, t, n^r] > 0 ) has been obtained from a system E 2 , 
which corresponds to a continuous time controller. Suppose 
that Si,i = 1 , 2 , satisfies Assumption [T] with gain 7 * > 0 . 
Furthermore, suppose that = 1,2, is input feedforward 
output feedback passive with passivity indices [vi^pi) and 
positive semi-definite storage function Vi, which satisfies 
\Vi{xi)-Vi{x 2 )\ < L\\xi-X2\\^ for any ||a;i-a: 2 || < e and 
some constants L,6 > 0. If 1 /^, Pc satisfy 


where 



< min{i/i,z/ 2 }, 


< min{p 2 


!/l — l/c ’ "I 1/2 — l^c I ’ 


Vi = 1^1-7i'r(l + AiIpiI) - 7ir2|pi|, 
Pi = Pi - 7i'r|pi|/Ai, 


(13) 


(14) 


1^2 

= i>2(l- 


P2 

~ ~ 

(15) 

0(2 

= a + T + ^ 2(^2 + 1 )), 



with Ai,fi,f2 arbitrarily positive numbers and i'2,P2,& 
obtained from ( [T 2 | i by substituting v,p,^ with r'2,P2,72. 
respectively, then the closed-loop system Ec satisfies the 
following passivity inequality 

-{V{x[k + 1]) - V{x[k])) 

T 

< w'^y - Vcw'^w - pcV^y + a2/T, (16) 


where V{x[k]) = Vi{xx[k]) -f V 2 {x 2 [k]) and x 


Xi 

X2 


w = 


Wi 

W2 


. y = 


yi 

m 


are the state, input, output of E^, 


respectively. 

Proof: Given in Appendix ■ 

Theorem relates the passivity indices of the continuous 
time plant Ei and controller E 2 to the passivity indices 
of discrete time system Ec where the symbolic controller 
Trfj,rj{^ 2 ) is approximately bisimilar to E 2 . It can also be 
used as a guide to the design of the continuous controller, if 
the designer knows that only a software implementation will 
be used. Notice that the only requirement on the continuous 
controller is that it satisfies a certain passivity inequality. 

A direct result of Theorem and Theorem [T] is that, if 
1 ^ 2 , P 2 can be designed for E 2 such that ( [T3] l is satisfied with 
Vc, Pc > 0, and furthermore, if Ec is strongly finite-time 
detectable, then the states of Ec is ultimately bounded. 

Particularly, when the external input is zero (i.e., wi — 
W 2 = 0 ), then ([3^ reduces to 


-{V{x[k + l])-V{x[k])) 

T 

< -(F2 + pi)ylyi - (Pi + P2)yly2 + 02 

< -min{F2 +Pi,Pi + P2}y'^y + ^ 2 . 


If V 21 P 2 can be designed for E 2 such that P 2 + Pi, Pi + 
P 2 > 0 and Ec is strongly finite-time detectable, then Ec is 
ultimately bounded by Corollary [T] 

Remark 4: The symbolic model Tr^n{V‘ 2 ) we consider 
has countably infinite states. However, it is possible to 
consider compact subsets of state, input and output spaces 
and use the quantized version of these subsets as the state, 
input and output space of Tt-^,j(E 2 ). This will lead to a finite 
state model and local versions of the results presented above 
still hold. Similarly, it is straightforward to deal with local 
notions of passivity. 

V. Example 

In this section, we illustrate the theoretical results in 
preceding sections by a simple cruise control example. 

The longitudinal dynamics of the vehicle is given by 

El : Ti = Ml - coxi, Pi = xi, (17) 


where a;i is the speed of the vehicle, cq = 0.01 is the air-drag 
term, mi is the scaled input and yi is the output. 

The controller is given by 


S 2 : 


*2 = 


2/2 = - 


-1 -1 
1 -2 
0.5 0.5 


X 2 + 


0 

1 


U2, 


X2 + 2 m 2 . 


(18) 


The passivity indices z/i, pi for Ei can be chosen as vi = 
0, Pi = 0.01 while V 2 , P 2 for E 2 can be chosen as V 2 = 0.31, 
P 2 = 0.42. Let Ml = —P 2 , U 2 = yi- Then it is easy to find 
that vi+ P 2 > 0, Pi -f 1^2 >0 and the feedback loop system 
is asymptotically stable. 

Note that the system 0 is (5-ISS. Therefore we can 
compute its (e,p)-approximate bisimilar system Trfj.rj{^ 2 ) 
by choosing e = 0.9, r = 0 . 8,77 = 0.1, p = 0.1. Replace 
E 2 with T.r/ir/(S 2 ) to Constitute E^ (as shown in Figure 
[2, and assume the external input to be zero. Then by the 
formulas given in previous sections we can choose Ai = 
A 2 = A 3 = 1 ,A 4 = 1.5, As = 0 . 2 , fi = 10,^2 = 10 such 
that Pi = —0.3039, Pi = 0.007 and P 2 = 0.0106, p 2 = 
0.3411, a = 0.6141, which implies that Pi + P 2 > 0, 
Pi + P 2 > 0. Simulation results in Figure shows that E^ 
is ultimately bounded. 


VI. Conclusions 

We considered the problem of analyzing the passivity of 
a closed loop system when the controller is designed in 
continuous space, but implemented as a symbolic model. 
Our main result shows that if the implemented symbolic 
controller is obtained via approximate bisimulation, several 
passivity properties carry over despite such replacement. 
More precisely, we relate the passivity indices of the original 
system with both the plant and the controller as continuous 
systems, the bisimulation parameters, and the quasi-passivity 
indices of the new system with the controller implemented 
in discrete space. 

Combining ideas from symbolic control and passivity 
provides a general framework for analyzing and design¬ 
ing heterogeneous systems. We are currently working on 
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Clearly, B2 < r < D and ||a;[A:]|j2 < B2 < D < 00, 
where boundedness of D follows from the fact that V is 
radially unbounded. 
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Fig. 2. Simulation result with initial state a:i(0) = 3.1,ni(0) = 
0,£2(0) = (1.4, —3)',^ 2 ( 0 ) = 0. (top left) xi(t); (top right) ui(t); 
(down left) blue is x^lk] and red is x^\k\ ; (down right) 


extensions of this framework to more general dissipation 
inequalities. A potentially limiting assumption in the paper 
is that every discrete time signal shares the same clock. Such 
synchronization runs counter to the promise of composition- 
ality that passivity brings in large scale systems. We would 
like to relax this assumption in our future work. 

Appendix I 
Proof of Theorem[T] 

Let A = ;)!- + 2v. Because 

zp 

u^[k]y[k] < ^u^[k]u[k] + ^y^[k]y[k], 
from equation we have 
V{x[k + 1]) — V{x[k]) 

<^u^[k]u[k] + ^y’^[k]y[k] - vu^[k]u[k] - py'^[k]y[k] + a 

=(^ - v)u^[k]u[k] + (^ - P)y^[k]y[k] + a 

<^Bf + a. (19) 
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Therefore, for any Nq G Z_|_, k G Zq, 
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where the second inequality is from (0. 


Therefore, ||x[s]||2 < i 9 for s G {fc + 1 ,..., k + iVo}. 

Now consider s G {fc + Aq + !> k + 2 Ao}. If there 
exists s* G {k + No + A, ■■■, k + 2 No} such that 
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( 21 ) 


then by ([T^ we have 
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Vix[s* - iVo]) > - Noi^ +a)>v. 

Ap 

It implies that ||a;[s* — Aollb > r. By ( 20 i we have 
- No]) + No]^ + a) - 

< V{x[s* - (Vo]) 

B‘2 

< V + (Vo(t^ + ol). 

Ap 


This contradicts with (|2JJl. Therefore, ||a;[s]||2 < D for 
s G {/c + Wq + 1,..., k + 2Ao}- By induction we conclude 
that sup^>fe ||a;[s]||2 < £». □ 

Appendix II 
Proof of Theorem|2] 

Taking L = fcr, ^2 = {k + l)r for some fc G Zq in (|^, 
we have: 

V{x{{kA- 1 ) 1 ")) — V{x{kT)) < 
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Similar to the proof in (i), we have 


Ak+1)T 

/ u{t)'^yit) dt - Tu[khy[k] 


Ak+1)T 

/ u{t)'^y{t) dt - Tu[khy[k\ 

J kr 

J kr 


p{k+l)T 


< 


W[k]\\2\\y{t) - y[k]\\2 dt 


' kr 


p(k+l)T 

<\\u[k]\\ 2 j^ \\yit) - y{kT )\\2 dt 

<r^l\\u[k]\\i 


we have 

|^{k+l)7 

J kr 


uit)'^y{t) dt < Tulkfylk] + T‘^'l\\u[k]\\l. (24) 


It is also clear that 
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where Ai is an arbitrary positive number, we have: 
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-p y{ify{t) dt < T^l^\p\\\u[k]\\l- 

J kr 

T(^-p)|| 2 /[^]||^ + Air27|p|lh[fc]|ir 

Ai 


(26) 


Combing (24i, (25 1 , (26 1 and noting that V{x[k]) = 
V{x{kT)), the conclusion follows. 

(ii) Similar to (|2^, for any t G [fcr, (k + 1)1"), we have 
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where A 3 ,A 4 ,A 5 are arbitrary positive numbers. Then 
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Finally, because 

\V{x[k + 1]) - V{x{{k + l)r))| 

<L\\x[k + 1] — x{{k + 1)t)||® < Le®, 

|C(x[A:]) — V{x{kT))\ 

<L||a;[A:] — a;(/cr)||® < Le®, 

we have 

V{x[k + h)-yix\k]) 

< Vix{{k + 1)t)) — V{x{kT)) + 2LY. (30) 

Combing ( p7] ), ( |28] l, ( [29l l and ( |30l l, the conclusion follows 
immediately. □ 
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Appendix III 
Proof of Theorem[3] 


V{x[k + 1]) - V{x[k]) = {Vi{xi[k + 1]) - Vi{xi[k])) 

+ {V2{x2[k + l])-V2{x2[k]))- 


We bound the two terms on the right hand side individually. 

Bounding Vi{xi[k + 1]) — Vi{xi[k]): Consider the upper 
dashed block with input Ui[fc] and output yi[k\. Noting that 
ui[k] = wi[k] — y 2 [k], we have the following inequality by 
(i) of Theorem 

^{Vi{xi[k + 1]) - Vi{xi[k])) < {wi[k] - y 2 [k])'^yi[k] 

- Pi\\wi[k] - mMll - Pi||yi[A :]||2 (31) 

where Pi, pi are given by (EH. 

Bounding V 2 {x 2 [k + 1]) - V 2 {x 2 [k]): T.rAtr;(S 2 ) satisfies 
the following inequality by (ii) of Theorem 
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where 1 ^ 2 , p 2 , a is obtained from ( |T^ by substituting i/, p, 7 
with i' 2 ,P 2 , 72 , respectively. 

Now, consider the lower dashed block with input U 2 [k] 
and output y 2 [k]. Because ||fi 2 [fc] ~ ^ P-/2 under the 

uniform quantizer, we have ||u 2 [/c] —M 2 [fc ]||2 < y/mp/2. Fol¬ 
lowing the arguments presented in the proof of Theorem 
we have 
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where ^l ,^2 are arbitrarily positive numbers. Therefore, 
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where V 2 ,P 2 : ct 2 are given by 

With these two bounds, we see that (dropping the argu¬ 
ment k for notational simplicity) 
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The final step follows by noting that if i^c, Pc are chosen 
such that (ED holds (see also [30]), then 
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This implies that for any wi,W 2 ,yi,y 2 , we have 
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Plugging (|35]l into ([34|, we have the inequality ([Tfill. 
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